Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2828/PM-rE7Gvzmg48zeHqOy8M2o0-UM.mft
File:                     PM-rE7Gvzmg48zeHqOy8M2o0-UM.mft (raw, json)
Hash identifier:          NqHElc9uW2GU8JKOlgx1ZtnOnyOSkFsx0fQhqfuBOyE=
Subject key identifier:   2E:19:56:42:32:96:7C:1B:64:4D:01:6C:71:BC:73:0C:03:7F:13:14
Authority key identifier: 3C:CF:AB:13:B1:AF:CE:68:38:F3:37:87:A8:EC:BC:33:6A:34:F9:43
Certificate issuer:       /CN=3CCFAB13B1AFCE6838F33787A8ECBC336A34F943
Certificate serial:       1292
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PM-rE7Gvzmg48zeHqOy8M2o0-UM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2828/PM-rE7Gvzmg48zeHqOy8M2o0-UM.mft
Manifest number:          1292
Signing time:             Wed 08 Nov 2023 20:48:12 +0000
Manifest this update:     Wed 08 Nov 2023 20:48:12 +0000
Manifest next update:     Thu 09 Nov 2023 02:48:12 +0000
Files and hashes:         1: PM-rE7Gvzmg48zeHqOy8M2o0-UM.crl (hash: J+BHyohyx94oPbt4S+iAE5x2V/Gb0hIR8bqcnzRB1V8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4754 (0x1292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CCFAB13B1AFCE6838F33787A8ECBC336A34F943
        Validity
            Not Before: Nov  8 20:48:12 2023 GMT
            Not After : Oct  8 00:16:33 2024 GMT
        Subject: CN=2E19564232967C1B644D016C71BC730C037F1314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:20:1b:60:20:a0:39:65:3f:b8:63:7c:5a:81:
                    5a:0c:57:39:15:65:75:7b:e7:27:d4:b9:e3:16:bc:
                    82:22:86:19:5d:be:7c:60:73:41:84:17:e7:9e:57:
                    8a:a5:18:3c:58:bb:b9:4d:61:33:93:e5:e7:15:85:
                    8c:3e:72:22:20:4d:88:06:41:e5:1b:bc:7b:da:1d:
                    b0:33:04:b5:20:3b:e0:23:63:c2:48:30:1b:d9:aa:
                    fb:66:fc:c5:b8:2b:2e:15:7e:9e:b6:9a:5a:83:85:
                    37:54:ea:58:49:9e:f4:40:09:24:13:ef:20:98:c5:
                    ce:84:46:25:e8:1f:e8:d2:0b:19:6a:cf:18:49:d3:
                    7b:63:31:0f:d1:03:46:2d:dd:32:be:85:ac:a5:40:
                    20:39:2e:b4:94:27:91:cc:1b:f0:c6:1d:32:9b:ad:
                    2a:6c:2d:95:52:b6:23:ed:1c:e4:fd:e5:9c:bd:f4:
                    1d:09:67:5e:4e:12:e1:47:a8:b8:27:c1:58:05:2b:
                    d7:be:04:93:67:11:0d:5d:29:21:18:eb:e2:21:be:
                    ad:ab:9d:7a:ba:02:95:20:5a:21:c4:c3:22:a4:15:
                    a4:7e:74:e6:01:31:99:9f:ed:25:8c:9b:fd:5a:a9:
                    40:1a:98:bc:ef:19:80:38:c5:ad:31:74:a0:0b:a1:
                    89:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:19:56:42:32:96:7C:1B:64:4D:01:6C:71:BC:73:0C:03:7F:13:14
            X509v3 Authority Key Identifier:
                keyid:3C:CF:AB:13:B1:AF:CE:68:38:F3:37:87:A8:EC:BC:33:6A:34:F9:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2828/PM-rE7Gvzmg48zeHqOy8M2o0-UM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PM-rE7Gvzmg48zeHqOy8M2o0-UM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2828/PM-rE7Gvzmg48zeHqOy8M2o0-UM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:de:ee:f4:8a:3e:b4:f6:2a:c4:ce:f4:90:2d:04:ec:ed:88:
         6e:2c:89:2f:1d:76:04:39:9f:7a:9b:2a:82:39:5b:14:55:18:
         1e:d4:54:3f:43:cf:c8:ff:a7:c9:72:82:8f:0d:39:85:30:d7:
         4a:c0:d8:00:d6:1a:9b:7a:b9:3c:3d:42:32:31:5c:a0:89:13:
         70:66:1f:aa:2d:2b:57:02:60:79:f4:cb:89:3b:d7:71:46:51:
         ef:1e:62:97:af:df:dc:0e:60:f3:c1:e2:4c:07:14:2e:79:20:
         4a:90:f3:e0:55:64:43:75:f9:76:83:58:e5:53:a0:a9:49:29:
         d2:70:95:1c:59:d0:c0:0c:0a:75:3c:13:7e:5b:66:21:f6:74:
         19:27:36:bc:3c:6a:29:35:cc:a1:95:32:24:1c:72:fc:11:f6:
         e6:18:ee:75:0e:af:9d:0a:ff:73:ad:7f:98:48:48:ea:4a:94:
         9b:a8:4a:5a:af:eb:3a:97:4b:92:af:29:2e:fd:fe:01:e2:68:
         00:97:28:85:89:89:d6:1d:4d:cb:86:ed:58:26:db:03:c8:b6:
         08:6e:c3:c3:f3:86:75:f0:08:39:5a:62:d1:8c:a1:92:02:e4:
         27:ab:8d:b7:e4:08:d2:a9:2f:5c:e5:59:7b:1d:f4:21:0e:2c:
         54:f3:55:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 9 02:00:17 2023 by rpki-client on console-ams.rpki-client.org